Specify what account executes a PowerShell script

Splunk Search

I like to run PowerShell scripts under "Powershell v3 Modular Input" and created a script. I noticed via our HIPS block log that the PowerShell script is executed under the same service account as Splunk is running under.

Is there a way to define a different service account that runs the PowerShell?

Get Updates on the Splunk Community!

test 2

test 222222

test

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...

Specify what account executes a PowerShell script

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

test 2

test

Join the Hackathon at .conf26 and build a No-Code AI agent

Join the Conversation

Specify what account executes a PowerShell script

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

test 2

test

Join the Hackathon at .conf26 and build a No-Code AI agent